Source: mime-support
Version: 3.58
Severity: wishlist
Tags: patch
User: reproducible-builds@lists.alioth.debian.org
Usertags: timestamps
X-Debbugs-Cc: reproducible-builds@lists.alioth.debian.org

Hi!

While working on the “reproducible builds” effort [1], we have noticed
that mime-support could not be built reproducibly.

The attached patch sets the mtimes of all files which are modified
during the built to the date of the last changelog entry in order to
produce files with reproducible metadata. Please also consider this
other bug from the reproducible builds team:
https://bugs.debian.org/776939

Cheers,
akira

[1]: https://wiki.debian.org/ReproducibleBuilds

diff -Nru mime-support-3.58/debian/changelog 
mime-support-3.58+nmu1/debian/changelog
--- mime-support-3.58/debian/changelog  2014-12-28 07:06:43.000000000 +0100
+++ mime-support-3.58+nmu1/debian/changelog     2015-07-24 13:11:57.000000000 
+0200
@@ -1,3 +1,10 @@
+mime-support (3.58+nmu1) UNRELEASED; urgency=medium
+
+  * Non-maintainer upload.
+  * Fix mtimes before building binary packages to produce reproducible output
+
+ -- akira <marival...@gmail.com>  Fri, 24 Jul 2015 13:11:46 +0200
+
 mime-support (3.58) unstable; urgency=high
 
   * CVE-2014-7209: run-mailcap shell command injection.
diff -Nru mime-support-3.58/debian/rules mime-support-3.58+nmu1/debian/rules
--- mime-support-3.58/debian/rules      2014-12-28 07:06:43.000000000 +0100
+++ mime-support-3.58+nmu1/debian/rules 2015-07-24 13:11:43.000000000 +0200
@@ -6,6 +6,7 @@
 
 package        := mime-support
 
+export SOURCE_DATE_EPOCH = $(shell date -d "$$(dpkg-parsechangelog --count 1 
-SDate)" +%s)
 
 default:
        @echo "Build 'binary' or 'clean'?"
@@ -71,6 +72,8 @@
        dpkg-gencontrol -is -ip
        chown -R root.root debian/tmp
        chmod -R go=rX     debian/tmp
+       find debian/tmp -newermt "@$$SOURCE_DATE_EPOCH" -print0 | \
+               xargs -0r touch --no-dereference --date="@$$SOURCE_DATE_EPOCH"
        dpkg --build debian/tmp
        dpkg-name -o -s .. debian/tmp.deb
 

Attachment: signature.asc
Description: OpenPGP digital signature

_______________________________________________
Reproducible-builds mailing list
Reproducible-builds@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/reproducible-builds

Reply via email to